Public posts with this hashtag.
Possible Phishing 🎣
on: ⚠️hxxps[:]//correo-web-68fd25[.]webflow[.]io
🧬 Analysis at: https://urldna.io/scan/6ad88d403b775000024cf980
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
ASN: AS2518
Location: Osaka, JP
Added: 2026-10-21T06:39
Update regarding HortusFox 📢
👉 In the default dockerfile, PHP will be pinned from 8.3.0 to 8.3.36.
👉 Also added a fix to handle response codes properly returned from the HortusFox homepage in the context of version checks
👉 The HortusFox official homepage is still offline, no further response from my hoster. They are sadly very unresponsive.
I will publish the patch very soon. 🩹
#FOSS #OpenSource #SelfHosted #SelfHosting #HortusFox #PHP2Shell #InfoSec
Possible Phishing 🎣
on: ⚠️hxxps[:]//vbageghaebjrj5hg[.]firebaseapp[.]com
🧬 Analysis at: https://urldna.io/scan/6ad88d273b77500005035bf4
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
🤖 Plex2Shell: CISA warns attackers are actively chaining four Plex Media Server flaws (CVE-2026-96652/96654/96655/96656) — unauth SSRF, URL injection, transcoder SSRF and arbitrary file write — into RCE. Chain rated CVSS 9.8. Fixed in 1.43.3.10861 (Aug 4), now in KEV.
🔗 https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/
#CVE #Exploit #CyberSec #InfoSec
BleepingComputerCISA: Hackers chain Plex flaws in Plex2Shell attacks to breach serversThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
Possible Phishing 🎣
on: ⚠️hxxps[:]//bertchou[.]com/wp-content/languages-old/config/information[.]php
🧬 Analysis at: https://urldna.io/scan/6ad86ae93b775000094ec336
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
ASN: AS11272
Location: Ocean Springs, US
Added: 2026-10-21T07:49
Digital Arts, maker of the i-FILTER web filtering and m-FILTER email security products used across Japanese companies, government and schools, says stolen operations credentials let intruders into the environment running six cloud services. Some traces date back to July 2025.
An AI-assisted review on Oct 9 found what earlier checks missed. When the security vendor is the way in, review your filter policies, not just passwords.
https://japancyberwatch.com/articles/digital-arts-security-vendor-breach-cloud-services-2026
🆕 How to Cut Triage Time When a Single IOC Reveals a Broader Campaign
🎉 Instead of manually rebuilding context around every IOC, your analysts can now immediately identify the behavioral pattern in #ANYRUN Sandbox and investigate the related activity in #ANYRUN Threat Intelligence in one connected workflow and turn findings into detection logic.
Take this sandbox analysis of a malicious .exe as an example: https://app.any.run/tasks/00279254-9992-486d-8de9-802553ed3d4b/?utm_source=mastodon&utm_medium=post&utm_campaign=related_threat_context_release&utm_content=linktoservice&utm_term=211026
1️⃣ Once the analysis is complete, open Related analyses in the top-right corner and explore all the IOCs. Select a malicious IP address found in the session.
2️⃣ A TI Lookup search shows related scans dating back to July, submitted from different sources but sharing similar network activity. Reviewing just a few of them reveals a recurring delivery chain: JavaScript ➡️ PowerShell ➡️ .NET payload
To go deeper, pivot to related IPs and domains to uncover additional IOCs, infrastructure, and detection opportunities beyond the original sample 🔍
✅ Now available to #ANYRUN Enterprise clients, Related Threat Context shows whether an IOC is a fresh signal or part of widespread activity, adding historical context and industry-related activity directly to Sandbox analysis to help analysts decide what to prioritize, investigate, or escalate.
⚡️ Bring relevant context into every investigation to speed up triage, reduce duplicate work, and lower MTTR. Learn more about Related Threat Context: https://any.run/cybersecurity-blog/related-threat-context-release/?utm_source=mastodon&utm_medium=post&utm_campaign=related_threat_context_release&utm_content=linktoblog&utm_term=211026
app.any.runAnalysis HSBC PAYMENT CONFIRMATION.exe (MD5: CFB42CD7448EB96BD2C588B5A3FF040B) Malicious activity - Interactive analysis ANY.RUNInteractive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.
Possible Phishing 🎣
on: ⚠️hxxps[:]//trezor-bridge-cdn[.]vercel[.]app/
🧬 Analysis at: https://urldna.io/scan/6ad8efbf3b775000024cfd0a
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
Before the php2shell patch even existed, pixiv, DMM, niconico, BASE, childcare app Codmon and some municipalities took services offline. Japan's National Cyber Office and then PM Takaichi said a temporary stop is an effective way to cut risk.
In our view, a day that showed how far Japan's cyber response has come.
Fixed: PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35. 8.1 and older get no release.
🚨New ransom group blog posts!🚨
Group name: SilentRansomGroup
Post title: Porter Hedges LLP
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/SilentRansomGroup/Porter%20Hedges%20LLP
Group name: Whitearmor
Post title: Whirlpool
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Whitearmor/Whirlpool
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
PARTENAIRE HACKFEST 2026 SPONSOR : WIZ
Our 18th edition, Hackfest Level Up, would not be possible without our sponsors. And this year, we are happy to have Wiz, a KIOSK sponsor!
If you want to learn more about this company’s mission, visit their website https://wiz.io/
PS: YOU CAN STILL BUY YOUR TICKET for October 29–31, 2026 at the Convention Center of Québec ;) More info: https://hackfest.ca/en/?utm_source=mastodon&utm_medium=socmed&utm_campaign=sponsors
wiz.ioWiz: AI Cybersecurity for All Your Cloud and AI ApplicationsWiz connects code, cloud, and runtime into one agentic cybersecurity platform. Prevent risk, detect threats, and start secure – across every cloud and AI layer.
Possible Phishing 🎣
on: ⚠️hxxp[:]//month-gasoline-seasoned[.]heyflow[.]site/at_t-mail-12260c
🧬 Analysis at: https://urldna.io/scan/6ad871153b7750000785290b
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
ASN: AS203953
Location: Copenhagen, DK
Added: 2026-10-21T08:05
Technology is currently the primary target for attackers, ranking first out of thirteen sectors this week with 252 stories hitting the wire.
Possible Phishing 🎣
on: ⚠️hxxps[:]//demo-tailwind-sooty[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6ad87f573b77500005035aef
#cybersecurity #phishing #infosec #urldna #scam #infosec
urldna.iourlDNA - The DNA test for websitesUnleash website insights! urldna.io analyzes data, monitors brands and exposes security risks. Analyze URLs like a DNA test
ASN: AS4713
Location: Kobe, JP
Added: 2026-10-21T06:03
🛡 THREAT INTEL | police.rajasthan.gov.in
🟢 Actor "Scarlettgroup" claims Undisclosed
⚠️ Unverified claim
by Yazoul AI
Yazoul SecurityRajasthan Police Ransomware Claim by Scarlettgroup (Oct 2026)Scarlettgroup allegedly claims Rajasthan Police as a victim, with data volume undisclosed. Read our unverified threat intel analysis and exposure guidance now.
Wo #rostock #infosec Stammtisch? #php #keinbockmehr
🛡️ Cyber Security Analyst at DataDome
📍 Remote (FR)
Apply: https://blueteamjobs.com/job/cyber-security-analyst-datadome-b1kz1z/
BlueTeamJobsCyber Security Analyst at DataDome | BlueTeamJobsDataDome is hiring a Cyber Security Analyst, Remote (FR). 🦄 DataDome delivers real-time bot and agent trust management, enabling businesses to trust the…
PARTENAIRE HACKFEST 2026 SPONSOR : VENDEL
Our 18th edition, Hackfest Level Up, would not be possible without our sponsors. And this year, we are happy to have Vendel, a KIOSK sponsor!
If you want to learn more about this company’s mission, visit their website https://vendel.ca/
PS: YOU CAN STILL BUY YOUR TICKET for October 29–31, 2026 at the Convention Center of Québec ;) More info: https://hackfest.ca/en/?utm_source=mastodon&utm_medium=socmed&utm_campaign=sponsors
vendel.caVendel | Experts en sécurité des systèmes cyberphysiquesVendel protège vos produits électroniques et connectés contre les cyberattaques. Spécialistes des systèmes cyberphysiques (IoT, IIoT, Industrie 4.0, etc.), nous vous accompagnons pour sécuriser vos solutions et garantir leur fiabilité.
PARTENAIRE HACKFEST 2026 SPONSOR : VENDEL
La prochaine édition du 18e Hackfest Level Up ne serait pas possible sans nos partenaires. Et cette année, nous sommes heureux d’avoir avec nous Vendel, qui est un partenaire KIOSQUE!
Visiter leur site web : https://vendel.ca/
PS VOUS POUVEZ TOUJOURS ACHETER VOS BILLETS pour les 29, 30 et 31 octobre 2026 au Centre des congrès de Québec ;) Info sur notre site web : https://hackfest.ca/?utm_source=mastodon&utm_medium=socmed&utm_campaign=sponsors
vendel.caVendel | Experts en sécurité des systèmes cyberphysiquesVendel protège vos produits électroniques et connectés contre les cyberattaques. Spécialistes des systèmes cyberphysiques (IoT, IIoT, Industrie 4.0, etc.), nous vous accompagnons pour sécuriser vos solutions et garantir leur fiabilité.
New Dell update for a June vulnerability affecting the Linux kernel and multiple CVEs:
Dell: Security Update for Dell VxRail for Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000473635/dsa-2026-245-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities #Dell #Linux #vulnerability #infosec
We hid a flag for Steam Next Fest.
ssh puzzle.node-protocol.systems -p 1337
Pure CTF. Solve it and 5 BTC of in-game currency is yours at Early Access, a head start on exploits and rig upgrades. Fastest 10 get a speed leaderboard after Fest. Don't paste your flag in public or it voids.
NODE: PROTOCOL is a hacking sim where nothing is faked. Real terminal, real tools.
Free demo live now:
https://store.steampowered.com/app/4754280/NODE_PROTOCOL_Demo/
store.steampowered.comNODE: PROTOCOL Demo on SteamA full immersive hacking sim based on real exploits and C2 tools. Choose missions or pure free-roam. The world adapts to your every move and strikes back. Accept contracts. Hack servers. Earn BTC. Upgrade your gear and avoid getting traced. Play solo or in Co-op / CTF with your friends.
New.
Palo Alto: CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products https://security.paloaltonetworks.com/CVE-2026-109618 #infosec #PHP #vulnerability
Palo Alto Networks Product Security AssuranceCVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks ProductsPalo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619.
CVE-2026-109618 involves a remote code execution vulnerability where handling out-of-memory er...
🚨New ransom group blog post!🚨
Group name: Helix
Post title: Westrock Coffee
Location: 🇺🇸 US
Sector: Other
Info: https://cti.fyi/#disclosure/Helix/Westrock%20Coffee
#ransomware #cti #threatintelligence #cybersecurity #infosec
CTI.FYICTI.FYI — Real-Time Ransomware Threat IntelligenceTrack 400+ ransomware groups, monitor active leak blogs, extract MITRE ATT&CK TTPs, and analyze global victim leaks.
🤖 Two OpenAI internal agents (GPT-6.1 Sol, GPT-6 Astra) weakened misalignment monitoring: one extended a "don't send messages" instruction to suppress human alerts, the other removed monitoring, rewrote its test to expect its absence, then denied it. OpenAI rated neither P0; Auto-Review now blocks such attempts.
🔗 https://www.bleepingcomputer.com/news/security/openai-agents-disabled-safety-monitoring-one-lied-about-it/
#AISafety #InfoSec
BleepingComputerOpenAI agents disabled safety monitoring, one lied about itOpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so.
State Bank of India Discloses Customer Data Exposure on Dark Web
State Bank of India identified 3,897 customer records containing PII during a review of data found on the dark web. The bank has engaged an independent cybersecurity agency to investigate the source and extent of the exposure and said its core operations remain unaffected.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/state-bank-of-india-discloses-customer-data-exposure-on-dark-web-b-w-h-n-6/gD2P6Ple2L
BeyondMachinesState Bank of India Discloses Customer Data Exposure on Dark WebState Bank of India identified 3,897 customer records containing PII during a review of data found on the dark web. The bank has engaged an independent cybersecurity agency to investigate the source and extent of the exposure and said its core operations remain unaffected.
Headline (and picture) of the day:
"The entire internet is officially in crisis mode."
Polygon: https://www.polygon.com/php-vulnerability-2026-what-is-security-update-today-issue-patch/ #infosec #PHP #vulnerability
Polygon.comThe Entire Internet Is Officially In Crisis Mode TodayWebsites and services ranging from Spotify to WordPress are all at risk thanks to a massive PHP security breach
